From: Tom Hughes <tom@compton.nu>
Date: Sat, 22 Feb 2025 20:33:01 +0000 (+0000)
Subject: Add AF_NETLINK to allowed address families for oxidized
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/777928d9d46f64bd515577aac27a286317baa752?hp=--cc

Add AF_NETLINK to allowed address families for oxidized
---

777928d9d46f64bd515577aac27a286317baa752
diff --git a/cookbooks/oxidized/recipes/default.rb b/cookbooks/oxidized/recipes/default.rb
index 28f65bf79..1840c2af3 100644
--- a/cookbooks/oxidized/recipes/default.rb
+++ b/cookbooks/oxidized/recipes/default.rb
@@ -156,6 +156,7 @@ systemd_service "oxidized" do
               "OXIDIZED_LOGS" => "/var/log/oxidized"
   nice 10
   sandbox :enable_network => true
+  restrict_address_families "AF_NETLINK"
   read_write_paths ["/run/oxidized", "/var/lib/oxidized", "/var/log/oxidized"]
   restart "on-failure"
   notifies :restart, "service[oxidized]"